CVE-2021-42255

High

Description

AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user.

SeverityHigh
CVSS7.8
Exploit probability—
ProductBlueplanet-works Appguard
PublishedApr 12, 2022
First seenApr 12, 2022

How to fix

Update
  • blueplanet-works appguard6.7.100.1 or later

Affected products

ProductAffected versionsFixed in
blueplanet-works appguardv < 6.7.100.16.7.100.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-42255 · Blueplanet-works Appguard · Dark Radar